Low Authority GPS Aiding of Navigation System For Anti-Spoofing

ABSTRACT

A method and apparatus for generating navigation solutions. A global positioning system based navigation solution unit; an inertial navigation solution unit; a correction unit, a limiter, and an adding unit. The global positioning system based navigation solution unit is capable of generating a first navigation solution. The inertial navigation solution unit is capable of generating a second navigation solution. The correction unit is capable of generating a raw correction. The limiter is capable of selectively modifying the raw correction to fall within a selected range of corrections to form a correction. The adding unit is capable of adding the correction to the second navigation solution to form a navigation solution.

GOVERNMENT LICENSE RIGHTS

This invention was made with Government support under F42610-98-C-0001awarded by the United States Air Force. The Government has certainrights in this invention.

BACKGROUND INFORMATION

1. Field

The present disclosure relates generally to navigation systems and inparticular to navigation systems that use global positioning systems andinertial measurement units. Still more particularly, the presentdisclosure relates to a low authority global positioning system aidedinertial navigation system with anti-GPS-spoofing for use on movingvehicles.

2. Background

A global positioning system (GPS) is a space based radio navigationsystem that provides reliable positioning, navigation, and timingservices on a continuous world-wide basis. A global positioning systemincludes satellites orbiting the earth, control monitoring stations onthe earth, and global positioning system receivers. The globalpositioning satellites broadcast signals from space that are receivedand tracked by global positioning receivers. Each global positioningreceiver may then estimate and provide a three dimensional location.This three dimensional location may include, for example, latitude,longitude, and altitude. Additionally, time may be obtained from thesesignals that are broadcast by the satellites.

Global positioning systems have been employed in many navigationapplications. Some concerns exist in using global positioning systeminformation in some types of navigation systems. These concerns arepresent when certain levels of accuracy of the location of the vehicleare absolutely needed. In some cases, global positioning systemperformance may degrade in environments in which jamming, interference,or radiation is present. These types of situations are of concern forboth military and commercial aviation applications. However, when globalpositioning system accuracy degrades, this degradation is usuallydetected by the integrity-monitoring flight software. Further, variousmeasures are available to counter these types of problems.

In some cases, spoofing of global positioning signals also may occur. Inother cases, meaconing of the signals also may occur. Meaconing involvesthe interception and rebroadcast of navigation signals. These signalsmay be rebroadcast on a received frequency to confuse adversarial globalpositioning system navigation systems. As a result, an aircraft maycompute an inaccurate location.

With respect to spoofing and meaconing of global positioning signals,the accuracy may be severely degraded beyond a desired range. Thesetypes of global positioning system threats and anomalies are moredifficult to detect.

Therefore, it would be advantageous to have a method and apparatus for anavigation system that overcomes these problems.

SUMMARY

The advantageous embodiments provide a method and apparatus forgenerating navigation solutions. In one advantageous embodiment a methodis provided for generating a navigation solution. An inertial navigationsolution is generated using a set of inertial sensor measurements. Ablended global positioning system and inertial navigation systemnavigation solution is generated using a set of global positioningsystem receiver measurements and a set of inertial sensor measurements.A raw global positioning system navigation correction is computed as thedifference between the inertial navigation solution and blended globalpositioning system and the inertial navigation system navigationsolution. A global positioning system correction is computed by applyinga limit on the raw global positioning system navigation correction. Theinertial navigation solution and the global positioning systemcorrection are added to form a global positioning system-aidednavigation solution.

In another advantageous embodiment, a method is provided for generatinga navigation solution. A set of inertial navigation solutions isgenerated using inertial sensor measurements. A blended globalpositioning system and inertial navigation system navigation solution isgenerated using a set of global positioning system receiver measurementsand a set of inertial sensor measurements. A raw global positioningsystem navigation correction is computed as the difference between theinertial navigation solution and blended global positioning system andthe inertial navigation system navigation solution. The raw globalpositioning system navigation correction is stored with a time stamp.The raw global positioning system navigation correction at a specifiedpast time stamp is retrieved. A low authority global positioning systemcorrection is computed by applying a limit upon the retrieved raw globalpositioning system navigation correction. The inertial navigationsolution and the low authority global positioning system correction areadded to form the navigation solution.

In still another advantageous embodiment, a method is provided forgenerating a navigation solution. An inertial navigation solution isgenerated using a set of inertial sensor measurements. A blended globalpositioning system and inertial navigation system navigation solution isgenerated using a set of global positioning system receiver measurementsand the set of inertial sensor measurements. A raw global positioningsystem navigation correction is computed as the difference between theinertial navigation solution and blended global positioning system andthe inertial navigation system navigation solution. The raw globalpositioning system navigation correction is stored with a time stamp. Aglobal positioning system-only navigation solution is generated.Monitoring is performed for global positioning system spoofing.Responsive to detecting the global positioning system spoofing, aselected raw global positioning system navigation correction at a pasttime before the global positioning system spoofing was detected isretrieved. A low authority global positioning system correction iscomputed by applying a limit upon the retrieved raw global positioningsystem navigation correction. The inertial navigation solution and thelow authority global positioning system correction are added to form thenavigation solution.

In yet another advantageous embodiment, an apparatus comprises a globalpositioning system based navigation solution unit; an inertialnavigation solution unit; a correction unit, a limiter, and an addingunit. The global positioning system based navigation solution unit iscapable of generating a first navigation solution. The inertialnavigation solution unit is capable of generating a second navigationsolution. The correction unit is capable of generating a raw correction.The limiter is capable of selectively modifying the raw correction tofall within a selected range of corrections to form a correction. Theadding unit is capable of adding the correction to the second navigationsolution to form a navigation solution.

The features, functions, and advantages can be achieved independently invarious embodiments of the present disclosure or may be combined in yetother embodiments in which further details can be seen with reference tothe following description and drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

The novel features believed characteristic of the advantageousembodiments are set forth in the appended claims. The advantageousembodiments, however, as well as a preferred mode of use, furtherobjectives and advantages thereof, will best be understood by referenceto the following detailed description of an advantageous embodiment ofthe present disclosure when read in conjunction with the accompanyingdrawings, wherein:

FIG. 1 is a diagram illustrating a mission in which a vehicle may use alow authority global positioning system aiding for range safety inaccordance with an advantageous embodiment;

FIG. 2 is a diagram of a global positioning system and inertialnavigation system navigation system in accordance with an advantageousembodiment;

FIGS. 3A and 3B are a schematic diagram of an ultra-tightly-coupledglobal positioning system and inertial navigation system navigationsystem in accordance with an advantageous embodiment;

FIG. 4 is a block diagram of components in a navigation system inaccordance with an advantageous embodiment;

FIG. 5 is a block diagram of a navigation system in accordance with anadvantageous embodiment;

FIG. 6 is a block diagram of components in a navigation system inaccordance with an advantageous embodiment;

FIG. 7 is a flowchart of a process for generating a navigation solutionin accordance with an advantageous embodiment;

FIG. 8 is a flowchart of a process for generating navigation solutionsin accordance with an advantageous embodiment;

FIG. 9 is a flowchart of a process for storing corrections to navigationsolutions in accordance with an advantageous embodiment;

FIG. 10 is a flowchart of a process for removing corrections from anavigation solution in accordance with an advantageous embodiment; and

FIG. 11 is a flowchart of a process for generating an integratedsolution with a limit in accordance with an advantageous embodiment.

DETAILED DESCRIPTION

With reference now to the figures and in particular with reference toFIG. 1, a diagram illustrating a mission in which a vehicle may use alow authority global positioning system aiding is depicted in accordancewith an advantageous embodiment. In this example, mission 100illustrates a missile operation in which missile 102 may launch fromorigin 104 and reach target 106.

Missile 102 requires guidance, navigation, and control to reach target106 in these examples. The guidance is a function in missile 102 thatdetermines where missile 102 is going, such as towards target 106. Thenavigation determines where missile 102 is located. For example, theguidance function in missile 102 may provide information, such as targettrajectory in terms of desired position, velocity, and altitude. Thefunction generating this target trajectory is also known as a guidancelaw function. The navigation determines where missile 102 is located ata particular time.

For example, the navigation for missile 102 may provide the currentposition, velocity, and altitude. This information is also referred toas a navigation solution. The control in missile 102 determines how tocontrol flight of the missile 102 to target 106 based on the targettrajectory and the navigation solution. These commands may be sent tovarious actuators for control surfaces. The functions generating thesecommands are also referred to as control law function.

As missile 102 travels along trajectory 107 from origin 104 to target106, different parts of missile 102 are discarded or dropped off. Atpoint 108, first stage 110 is a solid booster that drops from missile102. At point 112, second stage 114, which also is a solid booster,drops from missile 102. At point 116, shroud 118 falls away from missile102. At point 120, third stage 122, a solid booster, falls away frommissile 102. At this point, missile 102 comprises post boost vehicle 124and reentry vehicle 126. Next, at point 128 post boost vehicle 124dispenses reentry vehicle 126.

Missile 102 may be guided along trajectory 107 using different types ofguidance. For example, from origin 104 until point 128, missile 102 mayuse all inertial navigation. From point 128 until reaching target 106,missile 102 uses low authority global positioning system aiding to guidemissile 102 to target 106.

During these different stages, all inertial navigation is used to ensurethat no safety concerns occur due to global positioning systemanomalies. A course correction through these stages may correctpropulsion variations in prior stages due to manufacturing tolerance andtemperature. Further, the course velocity correction also may extend therange of missile 102.

In these examples, a course velocity correction may occur following eachof the burn states to reduce required fuel. During the different stages,the different advantageous embodiments continuously compute a number ofdifferent navigation solutions in which raw global positioning systemnavigation corrections are computed and stored, but not applied duringthis portion of trajectory 107.

Spoofing and meaconing may occur anytime during trajectory 107. As aresult, global positioning system base navigation corrections computedin these earlier stages may be applied later in flight such as at point128 to allow time for spoofing detection. In these examples, theapplication of global positioning system based navigation correctionsare used in a delayed sense towards the later portions of trajectory107. These corrections occur as long as the required fuel consumption isacceptable. As a result, more time is present to detect globalpositioning system threats and anomalies using longer durations of data.

At this point, missile 102 employs low authority global positioningsystem aiding to navigate to target 106. This type of navigation usesglobal positioning signals that may be received from global positioningsystem satellites 130, 132, 134, and 136. The final velocity correctionsin these examples correct for any inaccuracies in velocity from thecourse corrections and also may take into account global positioningsystem based navigation corrections previously computed. During thefinal velocity correction in this example, limits to global positioningsystem base navigation correction may be applied to improve accuracywhile ensuring safety.

Further, total burn time also may be set to provide extra faultprotection. If any global positioning system threats and anomalies aredetected towards the end of the mission, the navigation system may goback in time to undo unwanted velocity corrections. After the completionof the fire and velocity correction, reentry vehicle 126 may bedispensed with high navigational accuracy.

Although mission 100 is described as a mission for a missile operation,the different advantageous embodiments may be applied to other types ofmissions or uses. For example, the different advantageous embodimentsmay be employed in missions involving spacecraft, fighter aircraft, andother suitable vehicles.

Turning now to FIG. 2, a diagram of a global positioning system andinertial navigation system is depicted in accordance with anadvantageous embodiment. In this example, navigation system 200 includesglobal positioning system receiver 202, inertial measurement unit 204,and navigation unit 206. Navigation system 200 is an example of anavigation system that may be used in a vehicle, such as missile 102 inFIG. 1. Of course, this type of navigation system may be used in othervehicles, such as, for example, a fighter aircraft, a spacecraft, orsome other suitable vehicle.

Navigation system 200 may take various forms. For example, navigationsystem 200 may be a loosely coupled global positioning system andinertial navigation system, a tightly coupled global positioning systemand inertial navigation system, or an ultra-tightly-coupled globalpositioning system and inertial navigation system. In the form of aloosely coupled navigation system, global positioning system receiver202 acts as a self contained navigation system and actually computes anavigation solution.

In an ultra tightly coupled navigation system, global positioning systemreceiver 202 functions as a range residual sensor in which theinformation in the form of I and Q measurements are output to navigationunit 206. These I and Q measurements are in-phase and quadraturemeasurements. As a tightly coupled navigation system, global positioningsystem receiver 202 is treated as a range sensor outputting pseudoranges and delta pseudo range information to navigation unit 206.

Global positioning system receiver 202 receives global positioningsystem signals 208 from sources, such as satellites. Global positioningsystem receiver 202 generates in phase and quadrature measurements thatare sent to navigation unit 206 for use in estimating the location ofglobal positioning system receiver 202.

Inertial measurement unit 204 also provides position information tonavigation unit 206. Inertial measurement unit 204 provides inertialmeasurements by measuring or detecting the vehicle motion 210 of thevehicle in which navigation system 200 resides. Inertial measurementunit 204 may provide information in the form of incremental velocity andincrement angle as the vehicle moves. Inertial measurement unit 204 mayprovide information to track the position, orientation, and velocity ofthe vehicle without any external references.

Inertial measurement unit 204 may take various forms. For example,inertial measurement unit 204 may include a computer and motion sensorsto generate this information. These motion sensing devices may include,for example, accelerometers, gyroscopes, and/or other motion sensingdevices.

In other words, global positioning system receiver 202 and inertialmeasurement unit 204 provide raw measurement data used by navigationunit 206 to compute or generate navigation solutions. Navigation unit206 receives the positioning information from global positioning systemreceiver 202 and inertial measurement unit 204 to generate navigationsolutions. These navigation solutions are used by other components inthe vehicle to guide the vehicle. For example, the navigation solutionsmay be used by guidance and control 212. Guidance and control 212 usethis information to control movement of the vehicle.

With reference now to FIGS. 3A and 3B, a schematic diagram of anavigation system is depicted in accordance with an advantageousembodiment. Navigation system 300 is one example of implementation ofnavigation system 200 in FIG. 2. In particular, this implementation isan example of an ultra tightly coupled global positioning systeminertial navigation system. In this example, navigation system 300comprises measurement unit 302 and navigation unit 304. Measurement unit302 contains an inertial measurement unit and a global positioningsystem receiver.

In this example, inertial measurement unit (IMU) 305 is an example ofinertial measurement unit 204 in FIG. 2. In this example, a globalpositioning system comprises antenna 306, antenna 308, antenna 310,antenna 312, front end processing chain 314, front end processing chain316, and antenna to channel switch 318. These components are a part ofthe radio frequency portion of the global positioning system receiver.Additionally, digital unit 303 is part of the global positioning systemreceiver.

Front end processing chain 314 includes Combiner 320, low noiseamplifier (LNA) 322, down converter (DC) 324, and analog to digitalconverter (ADC) 326. Front end processing chain 316 includes combiner(C) 321, low noise amplifier (LNA) 323, down converter (DC) 325, andanalog to digital converter (ADC) 327. These front end processing chainsare used to condition the radio frequency (RF) signal for later use.Antenna to channel switch 318 selects one or more of the inputs for use.

Digital unit 303 comprises numerically controlled oscillator (NCO) 330,numerically controlled oscillator 332, pseudo-random-noise (PN) codegenerator 334, integrate and dump units 336, cosine unit 339, sine unit341, summing unit 343, and summing unit 334.

Digital unit 303 is an example of one implementation of components in aglobal positioning system receiver. Digital unit 303 may have anacquisition mode and a signal tracking mode. A signal tracking mode isidentical to that found in typical global positioning system receivers.A signal acquisition mode may use position, velocity, and altitude froman inertial navigator.

Navigation unit 304 comprises carrier phase rotation sum and dump 338,range residual evaluator 340, error Kalman filter 342, trackingpredictor 344, selection and acquisition 346, and navigator 348. Inthese examples, navigator 348 is the component in which differentnavigation solutions may be generated. Different advantageousembodiments may generate navigation solutions in this particularcomponent within navigation unit 304.

Navigation system 300 is one example of hardware and/or software inwhich different advantageous embodiments may be implemented. Of course,other advantageous embodiments may be implemented in other types ofnavigation systems. The illustration of this particular example is notmeant to imply architectural limitations to the hardware and/or softwarein which different advantageous embodiments may be implemented.

Turning now to FIG. 4, a block diagram of components in a navigationsystem is depicted in accordance with an advantageous embodiment. Inthis example, navigation system 400 is an example of components that maybe executed in a navigation unit, such as navigation unit 200 in FIG. 2.Navigation system 400 may provide navigation solutions used to controlthe flight or movement of a vehicle. These components may includesoftware components, hardware components, and/or a combination of thetwo.

In this example, navigation unit 400 includes components to generatenavigations solutions, such as inertial navigation solution unit 402,blended global positioning system and inertial navigation systemnavigation solution unit 404, and global positioning system onlynavigation solution unit 406. In these examples, each of thesenavigation solution units are software components that may be executedin a processor. A navigation solution generated by these units mayinclude, for example, position, velocity, and altitude. Of course, inother embodiments, these navigation solutions may be implemented using acombination of software and hardware components.

These three navigation solution units provide separate navigationsolutions. Blended global positioning system and inertial navigationsystem navigation solution unit 404, and inertial navigation solutionunit 402 receive inertial navigation measurement data 410 from aninertial measurement unit, such as inertial measurement unit 204 in FIG.2.

Global positioning system only navigation solution unit 406 and blendedglobal positioning system and inertial navigation solution unit 402receive global positioning system receiver measurements 411 from aglobal positioning system receiver, such as global positioning systemreceiver 202 in FIG. 2. Inertial navigation solution unit 402 generatesa navigation solution that is incorruptible by any global positioningsystem threats and anomalies.

Inertial navigation solution unit 402 uses only internal measurementunit measurements and a gravity model in these examples to generate anavigation solution. Inertial navigation solution generated by inertialnavigation solution unit 402 is typically used for real time guidanceand control and may be used as a fallback when a global positioningsignal is totally unusable.

Inertial navigation solution unit 402 generates an all inertialnavigation solution that is incorruptible by any type of globalpositioning system anomalies. This type of solution may be used as areference for computing global positioning system based navigationcorrections. This type of solution also may be used as a reference fordetecting global positioning system threats and anomalies.

Blended global positioning system and inertial navigation solution unit404 generates a blended navigation solution that uses inertialmeasurement unit measurements and a gravity model with periodic updatesusing global positioning system measurements. This type of solution isan optimal blending of inertial measurement unit measurements and globalpositioning system measurements. The blending is often performed usingan extended Kalman filter.

Blended global positioning system and inertial navigation solution 404uses global positioning system data. As a result, the navigationsolution generated by this type of unit may be corrupted by globalpositioning system anomalies. Implementation of this type of solutionmay use either tight coupling or ultra tight coupling. Tight couplinguses pseudo range and delta pseudo range measurements. Ultra tightcoupling uses phase and quadrature measurements.

Global positioning system only navigation solution unit 406 generates anall global positioning system navigation solution computed using onlyglobal positioning system data. This type of solution may be corruptedby a global positioning system. In these examples, global positioningsystem navigation only solution unit 406 generates a solution that maybe used for global positioning system integrity monitoring. Thissolution may be compared with an inertial navigation solution and thesolutions generated by blended global positioning system and inertialnavigation system navigation solution unit 404 in FIG. 4, which iselaborated in FIGS. 3A and 3B. Other components in FIG. 4 are notdiscussed in FIGS. 3A and 3B.

The output of inertial navigation solution unit 402, blended globalpositioning system and inertial navigation system navigation solutionunit 404, and global position system only navigation solution unit 406are sent into integrity monitor 412. Integrity monitor 412 also receivesglobal positioning system provided health data in global positioningsystem receiver measurement 411.

In addition, integrity monitor 412 uses the different solutions and thedata to determine whether corruption or anomalies have occurred withinglobal positioning system receiver measurements 411. Global positioningsystem spoofing and meaconing can be detected by the integrity monitor412.

The output of blended global positioning system and inertial navigationsystem navigation solution unit 404 and inertial navigation solutionunit 402 are sent into difference node 413. Difference node 413subtracts the output of inertial navigation solution unit 402 from theoutput of blended global positioning system and inertial navigationsystem navigation solution unit 404 to generate raw global positioningsystem navigation correction 414. Difference node 413 is an example of acorrection unit, which is a software and/or hardware component that iscapable of generating a correction for a navigation solution.

This raw correction is sent to optimal limiter 416, which may limit rawglobal positioning system navigation correction 414. Optimal limiter 416may limit the amount of correction within some range for a set ofvalues. A set of items as used herein refers to one or more items. Forexample a set of values is one or more values.

If raw global positioning system navigation correction 414 is greaterthan the range, optimal limiter 416 limits the correction to a valuewithin the range. In other words, if raw global positioning systemnavigation correction 414 has a value that is greater than the upperlimit of the range, optimal limiter 416 may only generate an output thathas the value of the upper limit of the range.

The output of optimal limiter 416 is low authority global positioningsystem correction 418. This correction is sent into summing node 420.Additionally, the output of inertial navigation solution unit 402 alsois sent into summing node 420, which is an example of an adding unit. Anadding unit is any software and/or hardware component that adds acorrection to a navigation solution. Summing node 420 generates lowauthority global positioning system aided navigation solution 422, whichis sent to guidance and control law 424 in these examples.

This correction is modified or limited in a manner to reduce the effectof corruption to a global positioning system signal.

The different advantageous embodiments recognize that protection againstundetected global positioning system anomalies may be provided. In thedifferent advantageous embodiments, this protection may optimally limitthe global positioning system based navigation correction to some errorbound by the inertial navigation solution. This error bound is a rangeof corrections that may be used. This range may vary over time.

The range used to limit the amount of navigation correction that may beallowed may be selected based on predicted inertial navigation errors orbased on historical flight test navigation errors. Predicted inertialnavigation errors can be predicted by error covariance analysis of theinertial navigation system. This type of limit is small enough to ensurerange safety while being large enough to enable sufficient globalpositioning system based navigation corrections under normal globalpositioning system operations. The selection of the range varies and maybe based on factors, such as range safety and a desired level ofaccuracy.

In the different advantageous embodiments, integrity monitor 412performs integrity monitoring. Integrity monitor 412 uses both globalpositioning system provided health data and derived global positioningsystem health data. Global positioning system provided health data isdata received from a global positioning system receiver. This mayinclude, for example, satellite status, receiver status, receiverchannel Status, receiver track Status, carrier to noise ratio, jammingto signal ratio, dilution of precision, figure of merit, and othersuitable data. Derived global positioning system health data is datathat is generated using global positioning data. This data may include,for example, a Kalman filter residual check, a Kalman filter residualtrending, Kalman filter correction sanity check, global positioningsystem and inertial measurement unit parameters sanity check, errorcovariance check, navigation solutions cross comparison, and othersuitable data.

A technique of digital isolation of navigation solutions in theprocessor is employed to enhance integrity. In these examples, thedigital isolation avoids inadvertent cross corruption of the fourdifferent solutions by storing these solutions in separatenon-overlapping memory partitions. Further, digital isolation alsoincludes computing these solutions in separate execution time slots suchthat the halt or complication of one of these solutions due to acomputer system halt does not halt the computation of the rest of thenavigation solutions. This isolation is also known as ARINC 653partitioning. This type of partitioning is promulgated throughAeronautical Radio, Inc. (ARINC).

ARINC 653 is a specification for system partitioning and scheduling thatmay be used in safety and mission critical systems. This type ofspecification may be used in avionics equipment or other guidanceequipment. Isolation is used to avoid corruption. Integrity monitor 412is a prior art so it is not discussed in detail here. Integritymonitoring compares the navigation solution from GPS only, inertialonly, and blended GPS/INS to determine if the GPS is healthy andtrustworthy.

Additionally, the different advantageous embodiments provide an abilityto undo corrections that were previously made to the navigationsolutions. This ability is made by saving the corrections in a storageunit in a manner such that these saved corrections may be used to undocorrections made to the navigation solutions at a later time. In thedifferent advantageous embodiments, these corrections are saved withtime tags that allow those corrections to be undone at a later time.

Correction storage unit 426 includes navigation frame to earth centeredinertial (ECI) frame conversion 428, storage 430, and earth centeredinertial frame to navigation frame conversion 432. In these examples,correction storage unit 426 includes a feature that allows for storageof navigation corrections. The storage of these navigation correctionsare made in a manner that allows for undoing or removing previouscorrections.

In other words, the stored corrections are stored in the manner thatallows for the navigation system to undo prior corrections. These priorcorrections may be undone if a determination is made that an anomaly orunacceptable error in the navigation solution has occurred. Inoperation, correction storage unit 426 is capable of storing rawcorrections in association with a set of time stamps in a manner thatallows a selected raw correction to be retrieved from a prior time foruse by the adding unit in place of a current raw correction that is usedby optimal limiter 416.

This unacceptable error may occur because of global positioning systemanomalies, spoofing, meaconing, or other causes. In these examples, anearth centered initial reference frame is used to store thesecorrections to allow for the corrections to be undone.

Navigation frame to earth centered inertial frame conversion 428performs a conversion of the raw global positioning system navigationcorrection into an earth centered inertial reference frame. This type ofreference frame does not change over time. This type of reference frameis time-invariant in inertial space. These corrections are stored instorage 430 along with a time stamp or other information to identify thetime at which these corrections were generated. If this information isneeded, this information is sent to earth centered inertial frame tonavigation frame conversion 432 to convert the information back into aglobal positioning system base navigation correction format.

In these advantageous embodiments, the different components withincorrection storage unit 426 provide an ability to undo or removeunwanted corrections. In many cases, a global positioning system threator anomaly may be detected after the optimally limited globalpositioning system based navigation corrections have been applied forsome period of time. The different advantageous embodiments provide amechanism for undoing prior corrections by converting all correctionsfrom the navigation reference frame to an earth centered inertialreference frame. The earth centered inertial reference frame does notchange over time. As a result, the corrections stored may be applied ata later time as long as the appropriate propagation and conversion tothe navigation reference frame is performed.

For example, when a certain amount of correction is desired to be undonedue to spoofing, the uncorrupted correction at a time before thespoofing in the earth centered inertial reference frame is retrieved.The correction is up to the point in time before which the correctionsare desired to be undone. The correction is propagated in the earthcentered inertial frame to the current time at which correction is beingapplied. The corrections are then converted to the navigation referenceframe and applied.

This type of process may be used because global positioning systemanomalies are typically detected after they have occurred.

The process then goes back in time to undo unwanted corrections toensure safety. In one example, if the total corrections in position andvelocity at a past time t1 are delta_p1 and delta_v1, assume the totalcorrections at current time t2 are delta_p2 and delta_v2. Assume that attime t2, the integrity monitor determines that the GPS has been spoofedafter time t1. At this point, it is desired to remove all correctionsafter time t1.

Essentially, the velocity corrections to be removed are(delta_v2−delta_v1) in ECI and then are converted to the navigationframe at current time t2. The position correction to be removed is(delta_p2−delta_p1)−delta_v1*(t2−t1) in ECI frame and then are convertedto the navigation frame at current time t2.

In the illustrative examples, the removal of the correction may beperformed by retrieving raw global positioning system navigationcorrections at the past time t1, which are delta_v1 and delta_p1 in theearth centered inertial frame, propagating them to current time t2,which becomes delta_v1 and delta_p1+delta_v1*(t2−t1), converting themfrom the earth centered inertial frame to the navigation frame at timet2, then applying the converted corrections thru the optimal limiter 416at time t2. In general, navigation frames at time t1 and at time t2 aredifferent, and optimal limits of optimal limiter at time t1 and at timet2 are also different and are all time varying.

In these examples, each raw global positioning system correction has anassociated time stamp. The correction is converted to the earth centeredinertial frame for storage.

Turning now to FIG. 5, a block diagram of a navigation system isdepicted in accordance with an advantageous embodiment. In this example,navigation unit 500 is a more detailed version of navigation unit 400 inFIG. 4 in which data flow is shown.

In this example, navigation unit 500 includes global positioning systemreceiver 502, measurement residual 504, extend Kalman filter propagationand update 506, integrity monitor 508, blended global positioning systemand inertial navigation system navigation solution unit 510, inertialmeasurement unit 512, inertial measurement unit processing 514, inertialnavigation solution unit 516, predictor 518, optimal limiter 520,difference node 522, and summing node 524. Blended global positioningsystem and inertial navigation solution unit 510 is similar to blendedglobal positioning system and inertial navigation system navigationsolution 404 in FIG. 4. Inertial navigation solution unit 516 is similarto inertial navigation solution unit 402 in FIG. 4.

Global positioning system receiver 502 receives global positioningsignals to generate global positioning system receiver measurements,which are sent to measurement residual 504. Measurement residual 504generates residuals. These residuals are the difference between the GPSmeasured range/rate and the blended global positioning system andinertial navigation system estimated range/rate. The residuals are usedby extend Kalman filter propagation and update 504, to computecorrections for the GPS parameters, inertial measurement unitparameters, and blended navigation solution. In these examples, theinertial measurement unit parameters are used in blended globalpositioning system and inertial navigation system navigation solutionunit 510.

Extend Kalman filter propagation and update 506 generates ΔP_(kF) andΔV_(KF) 526, which is sent to integrity monitor 508 to assist inmonitoring global positioning system health and integrity. This outputcontains corrections in position and velocity.

Global positioning system receiver 502 also generates global positioningsystem only navigation solution and health status 528, which is sent tointegrity monitor 508 for use, at least in part, in determining whetherspoofing, meaconing, corruption, or some other undesirable anomaly hasoccurred in the data generated by global positioning system receiver502.

Extend Kalman filter propagation and update 504 also generates globalpositioning system parameters correction 530. These corrections are usedto update the global positioning system parameters, such as receiverclock bias, clock drift, and pseudorange bias used in measurementresidual 504.

In the process of computing the residuals, time matching of globalpositioning system data and navigation solution is performed. Generally,the global positioning system receiver and inertial measurement unit areasynchronous in time. In other words, these different units generatedata which may be output and available at different times. One timematching technique interpolates the navigation solution to the globalpositioning system data sampling time. The blended navigation solutionshave to be stored in a time-matching buffer for use in interpolation.The time-matching buffer is a buffer that stores vehicle position,velocity, and associated time stamp for use in the interpolation.

Extend Kalman filter propagation and update 506 also generates data inthe form of corrections in position and velocity. This output is sent tointegrity monitor 508. Integrity monitor 508 also receives output fromblended global positioning system and inertial navigation systemnavigation solution unit 510 and inertial navigation solution unit 516.Integrity monitor 508 performs integrity monitoring in a fashion similarto integrity monitor 412 in FIG. 4.

In this example, blended global positioning system and inertialnavigation system navigation solution 510 receives navigation correction532 from extend Kalman filter 506 for updating the blended navigationsolution. This navigation correction is the same as ΔP_(kF) and ΔV_(KF)526. This component also receives ΔV and ΔΘ 534, which is the change invelocity and the change in angle generated by inertial measurement unitprocessing 514. These inputs are used to generate the blended navigationsolution, which is sent to predictor 518, difference node 522,measurement residual 504, and integrity monitor 508 in these examples.

Predictor 518 propagates the blended navigation solution forward in timeto generate signals to assist global positioning system code and carriertracking loops. These loop aiding signals include Doppler frequencyshifts due to vehicle velocity and vehicle altitude change for theantenna selection. Inertial navigation solution unit 516 outputs PV 538,which contains position and velocity information.

In these examples, the output from blended global positioning system andinertial navigation system navigation solution unit 510 and inertialnavigation solution unit 516 are sent to difference node 522. Differencenode 522 subtracts PV 538 from the output of blended global positioningsystem and inertial navigation system navigation solution unit 510 togenerate raw global positioning system navigation correction 539. Thiscorrection is sent to optimal limiter 520, which may limit the amount ofcorrection to some range or threshold level.

The optimal limiter 520 is the same as optimal limiter 416 in FIG. 4.The output from optimal limiter 520 is the low authority globalpositioning system correction 540. This correction is summed with PV 538from inertial navigation solution unit 516 to form low authority globalpositioning system aided navigation solution 542. This information issent to guidance and control law 544 for controlling of the vehicle inthese examples.

Guidance and control law 544 includes computing the desired velocity andposition. The difference between the desired velocity/position and theestimated velocity/position from navigation is the velocity and positionerrors that need to be nulled. The guidance and control law 544 alsocomputes required actuator commands to null the velocity/positionerrors.

With reference now to FIG. 6, a block diagram of components in anavigation unit is depicted in accordance with an advantageousembodiment. In this example, navigation unit 600 consists of basiccomponents that may be implemented in a navigation unit, such asnavigation unit 200 in FIG. 2 for a low authority global positioningsystem aiding navigation system. FIG. 6 shows only some components fromFIG. 4. In this example, the components may comprise software and/orhardware components.

In this particular embodiment, navigation unit 600 includes twonavigation solution units. These navigation solution units are blendedglobal positioning system and inertial navigation system navigationsolution unit 602 and inertial navigation system navigation solutionunit 604. Difference unit 606 takes a difference between the solutiongenerated from blended global positioning and inertial navigationsolution unit 602 and inertial solution unit 604. The output ofdifference unit 606 is sent into correction unit 608 and optimal limiter610. Optimal limiter 610 generates a low authority global positioningsystem correction. This output is summed with the output of inertialnavigation solution unit 604 by summing unit 612 to generate a lowauthority global positioning system aided navigation solution. Thissolution is sent to a guidance and control system.

Correction unit 608 includes navigation to earth centered inertial frameconversion 618, storage 620, and earth centered inertial to navigationframe conversion 622. Navigation to earth centered inertial frameconversion 618 generates a form of the navigation correction that doesnot change over time. This form of correction is stored in storage 620.If corrections need to be undone, these corrections may be retrieved andconverted back to a navigation correction by earth centered inertial tonavigation frame conversion 622.

With reference now to FIG. 7, a flowchart of a process for generating anavigation solution is depicted in accordance with an advantageousembodiment. The process illustrated in FIG. 7 may be implemented in anavigation system, such as navigation system 200 in FIG. 2. Inparticular, the process may be implemented by navigation unit 206.

The process begins by generating an inertial navigation solution usinginertial sensor measurements (operation 700). The process then generatesa blended global positioning system and inertial navigation systemsolution using global positioning system receiver measurements andinertial sensor measurements (operation 702). The process then computesa raw global positioning system navigation correction as the differencebetween the inertial navigation system solution and the blended globalpositioning system and inertial navigation system navigation solution(operation 704). The process then computes a low authority globalpositioning system correction by applying a limiter upon the raw globalpositioning system navigation correction (operation 706).

The process then generates a low authority global positioning systemaided navigation solution by adding the inertial navigation solution andthe low authority global positioning system correction (operation 708).The process then returns to operation 700 as described above. In atypical implementation, the process is repeated for each navigationoutput cycle. For example, if the navigation solution needs to becomputed at 100 Hz, this process will be repeated every 10milli-seconds.

This solution, in operation 708, may be used to counter globalpositioning system spoofing. The solution also may be used to ensurerange safety under global positioning system anomalies. In launchvehicle or missile applications, when the vehicle deviates from theintended target trajectory by a certain preset amount such that there isa potential of civilian damage, the vehicle will be destroyed. This typeof protection is called range safety.

For a navigation system with global positioning system aiding, if theglobal positioning system is spoofed, the navigation aiding issignificantly incorrect. If the spoofing is not detected, the vehiclemay unknowingly deviate from the target trajectory to an extent that cancause civilian damage. However, the limiter in this invention can be setto be smaller than the allowable range safety deviation, such that themaximum correction from the global positioning system is limited to avalue that is smaller than the allowable deviation for range safety.This feature in the different advantageous embodiments can thereforeensure range safety even under the scenario of spoofing.

In these examples, the global positioning system-aided navigationsolution has the same accuracy as the blended global positioning systemand inertial navigation system global positioning system and inertialnavigation system navigation solution. More than around 99 percent ofthe time, if the 3-sigma error bound is used and there is no globalpositioning system anomaly present, the 3-sigma error bound is equal toaround three times of the standard deviation of the error covariance ofthe inertial navigation system.

With reference now to FIG. 8, a flowchart of a process for generatingnavigation solutions is depicted in accordance with an advantageousembodiment. The flowchart illustrated in FIG. 8 may be implemented in anavigation system, such as navigation system 600 in FIG. 6.

The process begins by generating an inertial navigation solution usinginertial navigation sensor measurements (operation 800). The processthen generates a blended global positioning system and inertialnavigation system solution using global positioning system receivermeasurements and inertial sensor system measurements (operation 802).

The process then computes a raw global positioning system navigationcorrection as a difference between the inertial navigation solution andthe blended global positioning system and inertial navigation systemnavigation solution (operation 804). The process then stores the rawglobal positioning system navigation correction with a time stamp(operation 806). This operation allows for prior corrections to beretrieved at a later point in time. A low authority global positioningsystem correction is then computed by applying a limiter on theretrieved raw navigation correction (operation 808).

The process then generates a low authority global positioning systemaided navigation solution by adding the inertial navigation solution andthe low authority global positioning system correction (operation 808),with the process looping back to the beginning for each navigationoutput cycle.

With reference now to FIG. 9, a flowchart of a process for storingcorrections to navigation solutions is depicted in accordance with anadvantageous embodiment. The process illustrated in FIG. 9 may beimplemented in a navigation unit, such as navigation unit 400 in FIG. 4.In particular, the process may be implemented in navigation to earthcentered inertial frame conversion 422 in FIG. 4.

The process begins by receiving a correction (operation 900). Theprocess then converts the correction to ECI frame and stores thecorrection with a time stamp (operation 902), with the processterminating thereafter. This process is performed for each correctionthat is generated.

With reference now to FIG. 10, a flowchart of a process for removingcorrections from a navigation solution is depicted in accordance with anadvantageous embodiment. The process illustrated in FIG. 10 may beimplemented in a navigation unit, such as navigation unit 400 in FIG. 4.

The process begins by receiving a request to remove corrections from aset of navigation solutions (operation 1000). In response to receivingthis request, the process identifies the set of corrections for the setof navigation solutions (operation 1002). These corrections may bestored in a storage, such as storage 424 in FIG. 4. The process thenconverts the set of identified corrections from an earth centeredinertial reference frame to a navigation reference frame (operation1004). The process then removes the correction from the set ofnavigation solutions using the corrections in the navigation referenceframe (operation 1006), with the process terminating thereafter. Thisprocess is performed for each retrieving request.

Thus, the process in FIG. 10 retrieves one or more corrections at aspecified past time stamp. These corrections also may be referred to asraw global positioning system navigation corrections. The retrieved rawglobal positioning system navigation correction from the specified pasttime stamp is propagated to a current time in the earth centeredinertial reference frame to form a propagated raw global positioningsystem navigation correction. The propagation is typically performedwith numerical integration from velocity to position. The propagated rawglobal positioning system navigation correction is converted from theearth centered inertial frame to a navigation reference frame andapplies through the limiter.

In these examples, the navigation solutions are not stored. Removing anunwanted correction is done by applying the correct correction at acurrent time using current navigation solutions at a current time.

With reference now to FIG. 11, a flowchart of a process for generating alow authority global positioning system aiding navigation solution isdepicted in accordance with an advantageous embodiment. The processbegins by receiving a navigation solution (operation 1100). In thisexample, the navigation solution is inertial navigation solution unit402 in FIG. 4. The process then generates a correction bounded by alimit (operation 1102). This limit is based on errors bound by theinertial navigation solution or based on errors from flight test data.The process then applies the correction to the solution (operation1104), with the process terminating thereafter. Operation 1104 generatesthe low authority global positioning system aiding navigation solutionthat reduces effects from corruption in the global positioning signal.

The flowcharts and block diagrams in the different depicted embodimentsillustrate the architecture, functionality, and operation of somepossible implementations of apparatus, methods and computer programproducts. In this regard, each block in the flowchart or block diagramsmay represent a module, segment, or portion of computer usable orreadable program code, which comprises one or more executableinstructions for implementing the specified function or functions. Insome alternative implementations, the function or functions noted in theblock may occur out of the order noted in the figures. For example, insome cases, two blocks shown in succession may be executed substantiallyconcurrently, or the blocks may sometimes be executed in the reverseorder, depending upon the functionality involved.

The different advantageous embodiments can take the form of an entirelyhardware embodiment, an entirely software embodiment, or an embodimentcontaining both hardware and software elements. Some embodiments areimplemented in software, which includes but is not limited to forms,such as, for example, firmware, resident software, and microcode.

Furthermore, the different embodiments can take the form of a computerprogram product accessible from a computer-usable or computer-readablemedium providing program code for use by or in connection with acomputer or any device or system that executes instructions. For thepurposes of this disclosure, a computer-usable or computer readablemedium can generally be any tangible apparatus that can contain, store,communicate, propagate, or transport the program for use by or inconnection with the instruction execution system, apparatus, or device.

The computer usable or computer readable medium can be, for example,without limitation, an electronic, magnetic, optical, electromagnetic,infrared, or semiconductor system, or a propagation medium. Non-limitingexamples of a computer-readable medium include a semiconductor or solidstate memory, magnetic tape, a removable computer diskette, a randomaccess memory (RAM), a read-only memory (ROM), a rigid magnetic disk,and an optical disk. Optical disks may include compact disk-read onlymemory (CD-ROM), compact disk-read/write (CD-R/W) and DVD.

Further, a computer-usable or computer-readable medium may contain orstore a computer readable or usable program code such that when thecomputer readable or usable program code is executed on a computer, theexecution of this computer readable or usable program code causes thecomputer to transmit another computer readable or usable program codeover a communications link. This communications link may use a mediumthat is, for example without limitation, physical or wireless.

A data processing system suitable for storing and/or executing computerreadable or computer usable program code will include one or moreprocessors coupled directly or indirectly to memory elements through acommunications fabric, such as a system bus. The memory elements mayinclude local memory employed during actual execution of the programcode, bulk storage, and cache memories which provide temporary storageof at least some computer readable or computer usable program code toreduce the number of times code may be retrieved from bulk storageduring execution of the code.

Input/output or I/O devices can be coupled to the system either directlyor through intervening I/O controllers. These devices may include, forexample, without limitation to, keyboards, touch screen displays, andpointing devices. Different communications adapters may also be coupledto the system to enable the data processing system to become coupled toother data processing systems or remote printers or storage devicesthrough intervening private or public networks. Non-limiting examplesare modems and network adapters are just a few of the currentlyavailable types of communications adapters.

The description of the different advantageous embodiments has beenpresented for purposes of illustration and description, and is notintended to be exhaustive or limited to the embodiments in the formdisclosed. Many modifications and variations will be apparent to thoseof ordinary skill in the art.

For example, the different illustration in the figures is not meant tolimit the architecture in which the different embodiments may beimplemented. For example, without limitation, in FIG. 4, blended globalpositioning system and inertial navigation solution unit 404 generates afirst navigation solution that is based on a global positioning systemsignal or data. The first navigation solution is not limited to thistype of unit. The different advantageous embodiments may use anavigation solution from any type navigation solution unit thatgenerates navigation solution that is based on or uses globalpositioning system data.

Further, different advantageous embodiments may provide differentadvantages as compared to other advantageous embodiments. The embodimentor embodiments selected are chosen and described in order to bestexplain the principles of the embodiments, the practical application,and to enable others of ordinary skill in the art to understand thedisclosure for various embodiments with various modifications as aresuited to the particular use contemplated.

1-10. (canceled)
 11. A method for generating a navigation solution, themethod comprising: generating a set of inertial navigation solutionusing inertial sensor measurements; generating a blended globalpositioning system and inertial navigation system navigation solutionusing a set of global positioning system receiver measurements and a setof inertial sensor measurements; computing a raw global positioningsystem navigation correction as the difference between inertialnavigation solution and blended global positioning system and inertialnavigation system navigation solution; storing the raw globalpositioning system navigation correction with a time stamp; retrievingthe raw global positioning system navigation correction at a specifiedpast time stamp; computing a low authority global positioning systemcorrection by applying a limit upon the retrieved raw global positioningsystem navigation correction; and adding the inertial navigationsolution and the low authority global positioning system correction toform the navigation solution.
 12. The method of claim 11, wherein thestoring step comprises: storing the raw global positioning systemnavigation correction with the time stamp in earth centered inertialreference frame.
 13. The method of claim 11, wherein the retrieving stepfurther comprises: propagating the retrieved raw global positioningsystem navigation correction from the specified past time stamp to acurrent time in earth centered inertial reference frame to form apropagated raw global positioning system navigation correction; andconverting the propagated raw global positioning system navigationcorrection from the earth centered inertial frame to a navigationreference frame.
 14. A method for generating a navigation solution, themethod comprising: generating an inertial navigation solution using aset of inertial sensor measurements; generating a blended globalpositioning system and inertial navigation system navigation solutionusing a set of global positioning system receiver measurements and theset of inertial sensor measurements; computing a raw global positioningsystem navigation correction as the difference between inertialnavigation solution and blended global positioning system and inertialnavigation system navigation solution; storing the raw globalpositioning system navigation correction with a time stamp; generating aglobal positioning system-only navigation solution; monitoring forglobal positioning system spoofing; responsive to detecting the globalpositioning system spoofing, retrieving a selected raw globalpositioning system navigation correction at a past time before theglobal positioning system spoofing was detected; computing a lowauthority global positioning system correction by applying a limit uponthe retrieved raw global positioning system navigation correction; andadding the inertial navigation solution and the low authority globalpositioning system correction to form the navigation solution.
 15. Themethod of claim 14, wherein the monitoring step comprises: monitoringfor global positioning system spoofing using the global positioningsystem only navigation solution, the inertial navigation solution, theblended global positioning system and inertial navigation systemnavigation solution, global positioning system receiver provided healthdata, and derived global positioning system health data.
 16. The methodof claim 14, wherein the retrieving step comprises: retrieving aselected raw global positioning system navigation correction at a pasttime before the global positioning system spoofing was detected, whereinretrieving the selected raw global positioning system navigationcorrection at a past time before the global positioning system spoofingwas detected allows the low authority global positioning system-aidednavigation solution to go back in time to remove the unwanted correctionduring which the global positioning system is spoofed.
 17. The method ofclaim 14, wherein the step of computing a low authority globalpositioning system correction by applying a limit upon the retrieved rawglobal positioning system navigation correction comprises: computing alow authority global positioning system correction by applying a limitupon the retrieved raw global positioning system navigation correctionassociated with a past time stamp and apply the limit at a current time.18. An apparatus comprising: a global positioning system basednavigation solution unit capable of generating a first navigationsolution; a inertial navigation solution unit capable of generating asecond navigation solution; a correction unit capable of generating araw correction; a limiter capable of selectively modifying the rawcorrection to fall within a selected range of corrections to form acorrection; and adding unit capable of adding the correction to thesecond navigation solution to form a navigation solution.
 19. Theapparatus of claim 18 further comprising: correction storage unitcapable of storing raw corrections in association with a set of timestamps in a manner that allows a selected raw correction to be retrievedfrom a prior time for use by the adding unit in placed of a current rawcorrection.
 20. The apparatus of claim 18 further comprising: a globalpositioning system receiver; and an inertial navigation system unit.